registry / skelpro / 1.5.0

skelpro@1.5.0

SkelPro – where projects get their bones structured.

AI Security Review

scanned 20h ago · by lpm-firewall-ai

An attacker-controlled remote template can cause arbitrary file writes outside the selected project through path traversal. Cleanup also shells an explicitly supplied path before deletion.

Static reason

No blocking static signals were detected.

Trigger

User runs create with an attacker-controlled remote template, or runs cleanup with a crafted path.

Impact

Overwrite user-writable files; crafted cleanup input may execute shell syntax or remove an unintended resolved path.

Mechanism

Unvalidated path construction and shell interpolation

Rationale

No malicious lifecycle behavior or secret exfiltration was found. The confirmed arbitrary-write and shell-injection risks warrant a warning.

Evidence

package.jsonsrc/actions.tssrc/hooks/scaffoldJSON.tssrc/hooks/cleanupWorktree.tscli.ts

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

src/actions.ts fetches user-supplied remote JSON templates.
src/hooks/scaffoldJSON.ts joins unvalidated template keys to the destination path.

skelpro@1.5.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code